⚠️ NEW EXPLOIT DETECTED: [CVE-2026-3660] CRITICAL RCE in Smart Feeder Platform /// ⚠️ POC PUBLISHED: [CVE-2026-3652] Info Disclosure /// 🛡️ PATCH AVAILABLE for Apache Struts v2.9 /// 🚨 ACTIVE CAMPAIGN targeting unpatched LotL drivers...

Global Vulnerability Feed

Real-time ingestion of vulnerability data from NVD, MITRE, and dark web sources. Track exploit maturity, CVSS risk scores, and vendor patch capability instantly.

CVE-2026-3660
04-01-2026
9.8
Public Exploit

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a critical broken access control vulnerability. Unauthenticated attackers can remotely execute arbitrary code via the serial interface API, gaining full device control.

Affected Product
Petlibro Smart Feeder v1.x
CVE-2026-3652
04-01-2026
7.5
PoC Available

Information disclosure vulnerability in cryptographic library allows local attackers to retrieve private keys via side-channel analysis during high-load processing operations.

Affected Product
OpenCrypto Lib v2.4.1
CVE-2026-3653
04-01-2026
5.3

Improper access control in the user profile module allows authenticated users to view others' email addresses through sequential ID enumeration in the API endpoint.

Affected Product
CloudPortal Enterprise